
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier: H9SqVxRP2oeEZ9Iwy7gkIzZ6IxCluzyJvLjfSa7kb8c=
Subject key identifier: 44:D9:00:B9:09:5C:2C:92:BF:EC:7F:B4:8E:E6:9A:0F:FA:82:07:A0
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number: 0275
Signing time: Wed 13 May 2026 02:10:05 +0000
Manifest this update: Wed 13 May 2026 02:10:04 +0000
Manifest next update: Wed 20 May 2026 02:10:04 +0000
Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: 3Qttrxr5hbO3+4qnRB5+F6kBqBXwQ/Pwj1G/96EaVcM=)
2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: s7Oir+kBK6V7D0xuqpSVbybxeozVx8Hx3+pya2RC/X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
Validity
Not Before: May 13 02:10:04 2026 GMT
Not After : May 20 02:10:04 2026 GMT
Subject: CN=6a03dd7c-8bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:19:74:28:b7:b7:f2:9c:a7:de:0f:94:e4:
e1:63:e1:e9:23:7a:aa:0c:ff:c2:a5:07:3c:5a:14:
49:3d:a4:4a:db:7d:9b:12:71:ab:32:4a:83:f5:f8:
40:44:c9:5c:dd:a0:75:e9:d4:bf:90:82:d6:f0:23:
ab:4c:74:00:5c:b9:45:da:e9:70:b6:0f:1c:99:46:
9d:6f:16:b4:0e:e8:4b:7a:7d:c6:19:d5:ce:0f:86:
77:cb:ea:49:60:9d:b0:35:db:f3:44:ac:23:4b:0d:
a6:6d:32:a3:c5:d9:bb:a2:d4:8c:49:f1:e7:31:b5:
24:2f:4f:af:29:be:07:ff:7c:83:7f:f6:4a:a9:d2:
ee:26:44:43:d6:85:0f:39:b0:72:e4:7b:1d:dc:0c:
ea:c5:98:2d:75:b8:2d:5f:ae:dd:e1:6a:84:fa:f3:
98:8c:8a:81:ad:68:5f:ad:35:10:d8:ab:01:18:a3:
c4:86:fb:22:11:c3:b6:2b:43:82:da:c0:96:aa:95:
ae:8d:15:ce:31:de:90:d9:ef:48:2c:bb:38:09:37:
60:94:63:dd:fa:54:4c:e5:1f:00:78:0a:70:ad:21:
f4:34:4b:ee:bf:9c:fb:23:29:fa:83:4e:5b:f2:a1:
02:63:c6:0a:c3:59:bb:e4:dc:5b:a4:b2:0a:f2:52:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:00:B9:09:5C:2C:92:BF:EC:7F:B4:8E:E6:9A:0F:FA:82:07:A0
X509v3 Authority Key Identifier:
keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:84:82:df:c3:10:14:45:2d:a4:18:c8:e6:54:aa:47:d9:
fe:14:b5:52:19:4c:ce:c0:1d:65:c2:e4:62:ff:d8:d1:3e:cc:
12:dc:88:32:f3:94:33:b6:8e:55:b2:0a:88:6e:16:53:28:af:
4f:9d:41:c6:bd:08:c4:cf:ed:c2:6a:ff:70:10:37:86:05:52:
cc:a4:f7:51:4a:a3:4d:8f:98:8f:55:62:1d:62:2b:73:1b:bb:
6c:53:79:a0:9f:22:30:74:8d:7d:ce:61:f3:ea:0b:d6:ff:2c:
35:56:93:95:22:ed:46:1d:24:62:9b:94:b9:2b:53:79:10:bf:
42:dd:a7:6f:7f:03:ec:0a:95:bf:a1:c4:18:d9:83:11:82:49:
3a:f9:8f:24:dd:ea:7d:64:bf:6f:98:a3:2c:30:aa:0c:85:cc:
ac:9c:37:15:c8:79:e8:b9:96:b3:f6:39:93:41:f4:fc:7c:dc:
ee:75:83:3f:f2:4f:81:c3:84:6b:8a:4b:9f:1b:75:a0:b1:4d:
aa:cc:4e:de:33:5f:e1:c2:93:cc:47:af:f0:23:7b:f9:10:26:
59:b1:c9:6c:7f:31:4c:7e:2c:3c:b6:f7:29:29:64:9f:2f:8b:
de:73:75:ad:7e:5c:3c:4b:28:9c:0e:c7:72:ce:26:02:f2:65:
e9:4a:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:52 2026 by rpki-client